AWS network-firewall documentation change
Summary
Added note about AWS Marketplace managed rule groups using 'stateful-domain-rulegroup' resource type and consuming domain capacity from firewall policies.
Security assessment
This change provides clarification about resource types and capacity usage for domain name rule groups. It's a documentation update about service behavior and resource management, not related to security vulnerabilities.
Diff
diff --git a/network-firewall/latest/developerguide/stateful-rule-groups-domain-names.md b/network-firewall/latest/developerguide/stateful-rule-groups-domain-names.md index a5cf7a025..63fbf0f59 100644 --- a//network-firewall/latest/developerguide/stateful-rule-groups-domain-names.md +++ b//network-firewall/latest/developerguide/stateful-rule-groups-domain-names.md @@ -12,0 +13,4 @@ AWS Network Firewall supports domain name stateful network traffic inspection. Y +###### Note + +AWS Marketplace managed rule groups use a `stateful-domain-rulegroup` resource type that is available only with managed rules. This resource type uses capacity from your firewall policy's total available domain capacity. Only AWS Marketplace managed rule groups can use this capacity. For more information, see [Firewall policy settings](https://docs.aws.amazon.com/network-firewall/latest/developerguide/firewall-policy-settings.html) and [AWS Network Firewall quotas](https://docs.aws.amazon.com/network-firewall/latest/developerguide/quotas.html). +